From 71a1bbd4dfe1160f4fea6bee815804bc7c5cbd33 Mon Sep 17 00:00:00 2001
From: Eric Kohl <eric.kohl@reactos.org>
Date: Sun, 30 Sep 2012 17:15:37 +0000
Subject: [PATCH] [INCLUDE] Add missing account right strings and system
 account flags.

svn path=/trunk/; revision=57441
---
 reactos/include/psdk/ntlsa.h    | 13 +++++++++++++
 reactos/include/psdk/ntsecapi.h |  6 ++++++
 2 files changed, 19 insertions(+)

diff --git a/reactos/include/psdk/ntlsa.h b/reactos/include/psdk/ntlsa.h
index 5f8d969d2ae..188c696ae28 100644
--- a/reactos/include/psdk/ntlsa.h
+++ b/reactos/include/psdk/ntlsa.h
@@ -33,6 +33,19 @@ extern "C" {
 #define SECRET_SET_VALUE 1
 #define SECRET_QUERY_VALUE 2
 
+/* System Access Flags */
+#define SECURITY_ACCESS_INTERACTIVE_LOGON             0x00000001
+#define SECURITY_ACCESS_NETWORK_LOGON                 0x00000002
+#define SECURITY_ACCESS_BATCH_LOGON                   0x00000004
+#define SECURITY_ACCESS_SERVICE_LOGON                 0x00000010
+#define SECURITY_ACCESS_PROXY_LOGON                   0x00000020
+#define SECURITY_ACCESS_DENY_INTERACTIVE_LOGON        0x00000040
+#define SECURITY_ACCESS_DENY_NETWORK_LOGON            0x00000080
+#define SECURITY_ACCESS_DENY_BATCH_LOGON              0x00000100
+#define SECURITY_ACCESS_DENY_SERVICE_LOGON            0x00000200
+#define SECURITY_ACCESS_REMOTE_INTERACTIVE_LOGON      0x00000400
+#define SECURITY_ACCESS_DENY_REMOTE_INTERACTIVE_LOGON 0x00000800
+
 
 #ifdef __cplusplus
 }
diff --git a/reactos/include/psdk/ntsecapi.h b/reactos/include/psdk/ntsecapi.h
index 8b6d4905ed6..7f9606f35c0 100644
--- a/reactos/include/psdk/ntsecapi.h
+++ b/reactos/include/psdk/ntsecapi.h
@@ -105,6 +105,12 @@ extern "C" {
 #define SE_NETWORK_LOGON_NAME TEXT("SeNetworkLogonRight")
 #define SE_BATCH_LOGON_NAME TEXT("SeBatchLogonRight")
 #define SE_SERVICE_LOGON_NAME TEXT("SeServiceLogonRight")
+#define SE_DENY_INTERACTIVE_LOGON_NAME TEXT("SeDenyInteractiveLogonRight")
+#define SE_DENY_NETWORK_LOGON_NAME TEXT("SeDenyNetworkLogonRight")
+#define SE_DENY_BATCH_LOGON_NAME TEXT("SeDenyBatchLogonRight")
+#define SE_DENY_SERVICE_LOGON_NAME TEXT("SeDenyServiceLogonRight")
+#define SE_REMOTE_INTERACTIVE_LOGON_NAME TEXT("SeRemoteInteractiveLogonRight")
+#define SE_DENY_REMOTE_INTERACTIVE_LOGON_NAME TEXT("SeDenyRemoteInteractiveLogonRight")
 #define TRUST_ATTRIBUTE_NON_TRANSITIVE 1
 #define TRUST_ATTRIBUTE_UPLEVEL_ONLY 2
 #define TRUST_ATTRIBUTE_TREE_PARENT 4194304